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CLAIM.AfflENDMENTS 

This listing of claims replaces all prior listings of claims submitted in the 
present application. 
Listing of Claims 

1 1. (Previously Presented) A method of authenticating end-user clients 

2 requiring access to services available in a computer-based communication 

3 system, comprising the steps of: 

4 a) at an authentication server connected in said communication 

5 system, defining a list of authentication modules available in said 

6 communication system, and mapping said authentication modules to 

7 authenticating domain identifiers associated to end-user clients of said 

8 authentication server, wherein said authenticating domain identifiers each 

9 comprise an application service identifier; 

10 b) sending, by an end-user client, a respective authentication domain 

1 1 identifier to said authentication server; 

12 c) creating, by the authentication server and depending on the 

13 authentication domain identifier, an authentication stack specific to said end- 

14 user client, said stack comprising one or more stack entries, each mapped to a 

15 respective authentication module; 
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16 d) rendering, for each stack entry and depending thereon, an 

17 authentication service provided at said respective authentication module to 

18 produce an authentication result for that entry; and 

19 e) consolidating authentication results to obtain an authentication status for 

20 the end-user client. 

21 

2-3. (Canceled) 

1 4. (Original) The method as defined in claim 1 wherein the 

2 authentication service includes local and remote services. 

1 5, (Original) The method as defined in claim 4 wherein the local and 

2 remote services include but are not limited to biometric schemes, 

3 cryptographic hardware services, smart cards and USB tokens. 

1 6. (Previously Presented) The method as defined in claim 1 further 

2 comprising, sending a unique session identifier to the end-user client 

3 responsive to an authentication status corresponding to a successful 

4 authentication. 

7-8. (Canceled) 
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1 9. (Currently Amended) A 3Phe system as dcfmcd in claim 7, for 

2 authenticating an end-user client in a computer-based communication system 

3 comprising: 

4 means, at the end-user client, for sending an authenticating domain 

5 identifier to an authentication server, wherein said authenticat ing domain 

6 identifier comprises an application service identifier; 

7 means, at the authentication server and depending onjhe 

8 authentic ation domain identifier, for creating an au thentication stack 

9 comprising one or more stack entries; 

10 means for rendering, for each stack entry and depending thereon, an 

1 1 authentication service to produce an authentication result for that e ntry; and 

12 means for consolidating authentication results to obtain an 

13 authentic ation status for the end-user client, 

14 wherein the authentication server, dependent on the application ID, 

15 retrieves a configuration specifying how to create the authentication stack. 
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